From 13fb37f23fce830ee6cee55bc886cdf3984861f8 Mon Sep 17 00:00:00 2001 From: John Althouse <84981330+john-althouse@users.noreply.github.com> Date: Fri, 20 Oct 2023 12:24:58 -0400 Subject: [PATCH] Update README.md --- README.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 6710193..ff8da74 100644 --- a/README.md +++ b/README.md @@ -86,13 +86,13 @@ Additional JA4+ methods are in the works... ## Licensing -All JA4+ methods are patent pending. - JA4: TLS Client Fingerprinting is open-source, BSD 3-Clause, same as JA3. This allows any company or tool currently utilizing JA3 to immediately upgrade to JA4 without delay. JA4+, which includes JA4S, JA4L, JA4H, JA4X, JA4SSH, and all future additions, are licensed under the FoxIO License 1.1. This license is permissive for most use cases, including for academic and internal business purposes, but is not permissive for monetization. If, for example, a company would like to use JA4+ internally to help secure their own company, then that is permitted. If, for example, a vendor would like to implement JA4+ into one of their products, they would need to purchase an OEM license from us. -Open-source projects can implement JA4+ as long as they reference the FoxIO License as it pertains to JA4+. Projects can achieve this in different ways such as simply adding the license to a NOTICE file that is referenced in the license file, see [Arkime](https://github.com/arkime/arkime/blob/main/NOTICE) as an example. Or by calling JA4+ as a plugin residing within a separate repository. +All JA4+ methods are patent pending. + +JA4+ can be implemented into open source tools by calling JA4+ as a plugin from a separate repository. We are working on building these plugins/modules for different open source tools so the community can more easily utilize JA4+ for free. It will take a while to get to all of them but we're working on it! This licensing allows us to provide JA4+ to the world in a way that is open and easily usable by most, but also provides us with a way to fund continued support, research into new methods, and the development of the upcoming JA4 Database. We want everyone to have the ability to utilize JA4+ and are happy to work with vendors and open-source projects to help make that happen.